Browse CVEs

HIGH 7.5 CVE-2022-29536 In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) … Fedora 41.4 / 42.2+ Fix from $1,9502022-04-20 HIGH 7.8 CVE-2022-25788 A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability ca… Advance Steel 2022.1.2 / 2022.2.2+ Fix from $1,9502022-04-19 HIGH 7.8 CVE-2022-27527 A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 versio… Navisworks 2019.6 / 2020.4+ Fix from $1,9502022-04-19 MEDIUM 5.3 CVE-2021-42781 Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library. Fedora 0.22.0+ Fix from $1,6002022-04-18 MEDIUM 5.3 CVE-2021-42782 Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library. Fedora 0.22.0+ Fix from $1,6002022-04-18 HIGH 7.8 CVE-2022-27525 A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write acces… Design Review Mitigation only Fix from $1,9502022-04-18 HIGH 7.8 CVE-2022-27526 A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in … Design Review Mitigation only Fix from $1,9502022-04-18 HIGH 7.8 CVE-2022-27529 A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while pa… Advance Steel 2019.1.4 / 2020.1.5+ Fix from $1,9502022-04-18 HIGH 7.8 CVE-2022-27530 A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer ove… Advance Steel 2019.1.4 / 2020.1.5+ Fix from $1,9502022-04-18 MEDIUM 5.5 CVE-2020-13495 An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can t… Openusd No fix yet Fix from $1,6002022-04-18 HIGH 7.8 CVE-2022-1381 global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass … Fedora 8.2.4763 / 13.0+ Fix from $1,9502022-04-18 MEDIUM 6.1 CVE-2022-1383 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented … Radare2 5.6.8+ Fix from $1,6002022-04-18 MEDIUM 5.5 CVE-2022-28966 Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c). Wasm3 No fix yet Fix from $1,6002022-04-16 HIGH 7.8 CVE-2022-29072 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents a… 7 Zip after 21.07 Fix from $1,9502022-04-15 HIGH 7.8 CVE-2022-24521 KEVEPSS 7% Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.19265 / 10.0.14393.5066+ Fix from $1,9502022-04-15 CRITICAL 9.1 CVE-2021-44488 An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op… Gt.m after 7.0-000 Fix from $2,3002022-04-15 HIGH 8.6 CVE-2022-20683 A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controll… Ios Xe Mitigation only Fix from $1,9502022-04-15 CRITICAL 9.8 CVE-2022-28044 Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control. Debian Linux Patch available Fix from $2,3002022-04-15 HIGH 7.8 CVE-2022-1304 An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code executi… Enterprise Linux Mitigation only Fix from $1,9502022-04-14 HIGH 8.8 CVE-2021-40426 A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b355… Sound Exchange No fix yet Fix from $1,9502022-04-14 CRITICAL 9.8 CVE-2022-28711 A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A sp… Apweb No fix yet Fix from $2,3002022-04-14 HIGH 8.8 CVE-2021-21939 A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to c… Imagegear No fix yet Fix from $1,9502022-04-14 HIGH 8.8 CVE-2021-21942 An out-of-bounds write vulnerability exists in the TIFF YCbCr image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can le… Imagegear No fix yet Fix from $1,9502022-04-14 HIGH 8.8 CVE-2021-21944 Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead … Imagegear No fix yet Fix from $1,9502022-04-14 HIGH 8.8 CVE-2021-21945 Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead … Imagegear No fix yet Fix from $1,9502022-04-14 HIGH 8.8 CVE-2021-21946 Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A spe… Imagegear No fix yet Fix from $1,9502022-04-14 HIGH 7.8 CVE-2021-40398 An out-of-bounds write vulnerability exists in the parse_raster_data functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file ca… Imagegear No fix yet Fix from $1,9502022-04-14 CRITICAL 9.8 CVE-2022-26507 A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code executi… Xmill 15.1 / 2021+ Fix from $2,3002022-04-14 HIGH 7.8 CVE-2022-1350 A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchun… Ghostpcl Mitigation only Fix from $1,9502022-04-14 HIGH 7.8 CVE-2022-25797 A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while pa… Dwg Trueview Mitigation only Fix from $1,9502022-04-13